ensp: 路由引入,路由过滤,路由策略 综合实验

一.实验要求 + 实验拓扑

二.实验思路

1.改路由器的名字 +配置IP地址

2.配置路由协议

3.在R2上进行双向路由引入

4.使用路由策略在R2的rip上过滤掉R4的业务网段

5.在R4上进行filter-policy路由过滤R1的业务网段

6.在R2的rip上将g0/0/1接口改成静默接口

三.具体实现

1.改名子 + 配置IP地址

R1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R1
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 100.1.1.1 24
[R1-GigabitEthernet0/0/0]int l0
[R1-LoopBack0]ip add 192.168.0.1 32
[R1-LoopBack0]int l1
[R1-LoopBack1]ip add 192.168.1.1 32

R2

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R2
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 100.1.1.2 24
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24
[R2-GigabitEthernet0/0/1]

R3

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R3
[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 100.2.2.3 24
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 100.3.3.3 24
[R3-GigabitEthernet0/0/1]int l0
[R3-LoopBack0]ip add 192.168.2.1 32
[R3-LoopBack0]int l1
[R3-LoopBack1]ip add 192.168.3.1 32

 

R4

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys R4
[R4]int g0/0/0
[R4-GigabitEthernet0/0/0]ip add 100.3.3.4 24
[R4-GigabitEthernet0/0/0]int l0
[R4-LoopBack0]ip add 192.168.4.1 32
[R4-LoopBack0]int l1
[R4-LoopBack1]ip add 192.168.5.1 32

2.配置路由协议

ospf 

area 0 

R2

[R2]ospf 1 router-id 2.2.2.2
[R2-ospf-1]a 0
[R2-ospf-1-area-0.0.0.0]ne 100.2.2.0 0.0.0.255

R3

[R3]ospf 1 router-id 3.3.3.3
[R3-ospf-1]a 0
[R3-ospf-1-area-0.0.0.0]ne 100.2.2.0 0.0.0.255

[R3-ospf-1-area-0.0.0.0]ne 192.168.2.1 0.0.0.0
[R3-ospf-1-area-0.0.0.0]ne 192.168.3.1 0.0.0.0

R2的ospf路由

area 1

R3

[R3-ospf-1]a 1
[R3-ospf-1-area-0.0.0.1]ne 100.3.3.0 0.0.0.255

R4

[R4]ospf 1 router-id 4.4.4.4
[R4-ospf-1]a 1
[R4-ospf-1-area-0.0.0.1]ne 0.0.0.0 255.255.255.255

R2的ospf路由

rip

R1

[R1]rip 100
[R1-rip-100]v 2
[R1-rip-100]undo summary
[R1-rip-100]ne 100.0.0.0
[R1-rip-100]ne 192.168.0.0
[R1-rip-100]ne 192.168.1.0

R2

[R2]rip 100
[R2-rip-100]v 2
[R2-rip-100]undo summary
[R2-rip-100]ne 100.0.0.0

查看R2上的rip路由

3.配置双向引入

R2:ospf引入rip

[R2]ospf 1  
[R2-ospf-1]import-route rip 100

 

R2:rip引入ospf

[R2]rip 100 
[R2-rip-100]import-route ospf 1

查看R1上的路由

3.配置路由策略

在R2的rip上进行路由引入时过滤掉R4的业务网段

[R2]acl 2000

[R2-acl-basic-2000]rule deny source 192.168.4.0 0.0.1.255  ---这里做了路由聚合
[R2-acl-basic-2000]rule permit source 0.0.0.0 255.255.255.255
[R2-acl-basic-2000]q
[R2]route-policy aa permit node 10
Info: New Sequence of this List.
[R2-route-policy]if-match acl 2000
[R2-route-policy]q
[R2]rip 100    
[R2-rip-100]import-route ospf 1 route-policy aa

查看R1的路由

4.配置filter-policy

R4

地址前缀列表

[R4]ip ip-prefix bb index 10 deny 192.168.0.0 23 less-equal 32 

[R4]ip ip-prefix bb index 20 permit 0.0.0.0 0 less-equal 32 --这里一定要这么配置,放行其它路由

filter-policy

[R4]ospf 1
[R4-ospf-1]filter-policy ip-prefix bb import 

查看R4的路由表

4.配置静默接口

在R2的rip上将G0/0/1配置成静默接口,可以防止rip报文在ospf中出现

[R2]rip 100
[R2-rip-100]s    
[R2-rip-100]silent-interface g0/0/1

四.测验

R1的路由表

过滤掉了R4的环回路由,成功

R4的路由表

没有R1的环回,其它正常,实验成功